Ebook Store

Wordfence Intelligence   >   Vulnerability Database   >   WordPress Plugins   >   Ebook Store

Information

Software Type Plugin
Software Slug ebook-store (view on wordpress.org)
Software Status Active
Software Author motovnet
Software Website www.shopfiles.com
Software Downloads 146,621
Software Active Installs 700
Software Record Last Updated July 21, 2026

13 Vulnerabilities

Submit a Vulnerability
Ebook Store <= 5.8013 - Cross-Site Request Forgery
4.3
CVE-2025-54702
Jul 30, 2025
Researcher: Nabil Irawan
Ebook Store <= 5.8014 - Reflected Cross-Site Scripting
6.1
CVE-2025-8113
Jul 26, 2025
Researcher: Bob Matyas
Ebook Store <= 5.8012 - Unauthenticated Arbitrary File Upload
9.8
CVE-2025-7437
Jul 23, 2025
Researcher: mikemyers
Ebook Store <= 5.8012 - Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details
4.4
CVE-2025-7486
Jul 21, 2025
Researcher: Bee
Ebook Store <= 5.8008 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2025-49862
Jun 12, 2025
Researcher: Trần Minh Huy
Ebook Store <= 5.8009 - Authenticated (Contributor+) Stored Cross-Site Scripting
6.4
CVE-2025-47589
May 7, 2025
Researcher: timomangcut
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting
6.1
CVE-2024-11287
Dec 20, 2024
Researcher: Peter Thaleikis
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step'
6.1
CVE-2024-12262
Dec 20, 2024
Researcher: nvthien
Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosure
5.3
CVE-2024-6567
Aug 1, 2024
Researcher: stealthcopter
Ebook Store <= 5.8001 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2024-23501
Mar 1, 2024
Researcher: Dragonim
Ebook Store <= 5.8009 - Reflected Cross-Site Scripting
6.1
CVE-2023-45602
Oct 9, 2023
Researcher: Le Ngoc Anh
Ebook Store <= 5.775 - Missing Authorization via ebook_store_export_orders
6.5
CVE-2023-22701
Apr 19, 2023
Researcher: yuyudhn
Ebook Store < 5.78 - Authenticated (Administrator+) Stored Cross-Site Scripting
4.4
CVE-2023-22690
Apr 19, 2023
Researcher: yuyudhn
Title Status CVE ID CVSS Researchers Date
Ebook Store <= 5.8013 - Cross-Site Request Forgery Patched CVE-2025-54702 4.3 Nabil Irawan July 30, 2025
Ebook Store <= 5.8014 - Reflected Cross-Site Scripting Patched CVE-2025-8113 6.1 Bob Matyas July 26, 2025
Ebook Store <= 5.8012 - Unauthenticated Arbitrary File Upload Patched CVE-2025-7437 9.8 mikemyers July 23, 2025
Ebook Store <= 5.8012 - Authenticated (Administrator+) Stored Cross-Site Scripting via Order Details Patched CVE-2025-7486 4.4 Bee July 21, 2025
Ebook Store <= 5.8008 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2025-49862 4.4 Trần Minh Huy June 12, 2025
Ebook Store <= 5.8009 - Authenticated (Contributor+) Stored Cross-Site Scripting Patched CVE-2025-47589 6.4 timomangcut May 7, 2025
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting Patched CVE-2024-11287 6.1 Peter Thaleikis December 20, 2024
Ebook Store <= 5.8001 - Reflected Cross-Site Scripting via 'step' Patched CVE-2024-12262 6.1 nvthien December 20, 2024
Ebook Store <= 5.8001 - Unauthenticated Full Path Disclosure Patched CVE-2024-6567 5.3 stealthcopter August 1, 2024
Ebook Store <= 5.8001 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2024-23501 4.4 Dragonim March 1, 2024
Ebook Store <= 5.8009 - Reflected Cross-Site Scripting Patched CVE-2023-45602 6.1 Le Ngoc Anh October 9, 2023
Ebook Store <= 5.775 - Missing Authorization via ebook_store_export_orders Patched CVE-2023-22701 6.5 yuyudhn April 19, 2023
Ebook Store < 5.78 - Authenticated (Administrator+) Stored Cross-Site Scripting Patched CVE-2023-22690 4.4 yuyudhn April 19, 2023

Did you know Wordfence Intelligence provides free personal and commercial API access to our comprehensive WordPress vulnerability database, along with a free webhook integration to stay on top of the latest vulnerabilities added and updated in the database? Get started today!

Learn more

Want to get notified of the latest vulnerabilities that may affect your WordPress site?
Install Wordfence on your site today to get notified immediately if your site is affected by a vulnerability that has been added to our database.

Get Wordfence

The Wordfence Intelligence WordPress vulnerability database is completely free to access and query via API. Please review the documentation on how to access and consume the vulnerability data via API.

Documentation